Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/vM3jxAaiVf0rQKzWCnIiTdzVHBU.roa
File: vM3jxAaiVf0rQKzWCnIiTdzVHBU.roa (raw, json)
Hash identifier: YZry53p4jprxyUybNM/WZwRZM4JcMnh+fQaYsGONtgQ=
Subject key identifier: BC:CD:E3:C4:06:A2:55:FD:2B:40:AC:D6:0A:72:22:4D:DC:D5:1C:15
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 01902A70CF348FCE8BA5CC0CCC3217158FEF
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/vM3jxAaiVf0rQKzWCnIiTdzVHBU.roa
Signing time: Tue 18 Jun 2024 08:22:34 +0000
ROA not before: Tue 18 Jun 2024 08:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6848
IP address blocks: 5.23.128.0/17 maxlen: 17
46.253.160.0/20 maxlen: 20
62.205.64.0/18 maxlen: 18
78.20.0.0/14 maxlen: 14
78.29.192.0/18 maxlen: 18
81.82.0.0/15 maxlen: 15
81.164.0.0/15 maxlen: 15
82.143.64.0/18 maxlen: 18
82.210.64.0/19 maxlen: 19
83.217.128.0/19 maxlen: 19
84.192.0.0/13 maxlen: 13
85.28.64.0/18 maxlen: 18
85.255.200.0/24 maxlen: 24
85.255.201.0/24 maxlen: 24
94.72.64.0/19 maxlen: 19
94.224.0.0/14 maxlen: 14
141.134.0.0/15 maxlen: 15
157.173.128.0/18 maxlen: 18
178.116.0.0/14 maxlen: 14
185.23.244.0/22 maxlen: 22
185.30.52.0/22 maxlen: 22
185.248.40.0/22 maxlen: 22
188.44.64.0/19 maxlen: 19
188.95.146.0/23 maxlen: 23
188.188.0.0/15 maxlen: 15
195.16.0.0/19 maxlen: 19
195.130.128.0/19 maxlen: 19
195.162.192.0/19 maxlen: 19
212.76.224.0/19 maxlen: 19
212.88.224.0/19 maxlen: 19
212.123.0.0/19 maxlen: 19
213.118.0.0/15 maxlen: 15
213.132.128.0/19 maxlen: 19
213.214.32.0/19 maxlen: 19
213.224.0.0/16 maxlen: 16
213.251.64.0/18 maxlen: 18
217.72.224.0/20 maxlen: 20
217.168.120.0/21 maxlen: 21
2a00:1cf8::/32 maxlen: 32
2a02:1800::/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 11:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:70:cf:34:8f:ce:8b:a5:cc:0c:cc:32:17:15:8f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Jun 18 08:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bccde3c406a255fd2b40acd60a72224ddcd51c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:43:70:b1:4c:bb:60:77:da:31:43:7b:d3:a8:
4a:74:ba:34:46:5f:89:a4:90:db:9f:08:81:7a:2b:
40:f5:75:d8:b2:62:00:dd:31:87:40:30:6c:be:0b:
7a:30:2e:db:f7:1e:0b:8a:f2:61:25:38:f9:36:0c:
3d:47:a6:53:86:bc:25:29:f4:92:cc:ac:bb:42:8c:
02:bd:48:90:6a:6d:b4:5f:59:16:58:ad:df:51:e4:
d5:63:2f:27:40:c8:27:6a:b0:e8:84:25:82:0d:8d:
35:48:cb:56:64:92:a2:37:f8:30:13:80:5c:e3:4e:
4d:db:e7:af:c0:4c:27:40:95:d0:3f:2c:b9:e9:5f:
d8:31:86:15:69:d6:a0:57:d8:70:2f:76:97:83:e7:
02:ab:15:40:90:e6:2e:30:e6:3c:81:a4:35:29:65:
ae:3c:b3:33:7f:61:37:37:ff:e3:c8:68:4f:46:42:
30:59:4f:68:97:96:7f:76:45:94:3e:ba:1c:09:64:
07:0a:37:99:2d:6f:1f:66:49:a1:b2:cd:28:b1:04:
db:9a:a1:a7:34:a8:44:7b:14:8a:54:ff:a3:6a:29:
85:b9:30:e9:9e:9f:7c:46:2a:b9:d3:bd:5f:e3:d9:
dc:42:7d:17:7e:81:75:9b:97:13:c2:b7:79:eb:79:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CD:E3:C4:06:A2:55:FD:2B:40:AC:D6:0A:72:22:4D:DC:D5:1C:15
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/vM3jxAaiVf0rQKzWCnIiTdzVHBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.128.0/17
46.253.160.0/20
62.205.64.0/18
78.20.0.0/14
78.29.192.0/18
81.82.0.0/15
81.164.0.0/15
82.143.64.0/18
82.210.64.0/19
83.217.128.0/19
84.192.0.0/13
85.28.64.0/18
85.255.200.0/23
94.72.64.0/19
94.224.0.0/14
141.134.0.0/15
157.173.128.0/18
178.116.0.0/14
185.23.244.0/22
185.30.52.0/22
185.248.40.0/22
188.44.64.0/19
188.95.146.0/23
188.188.0.0/15
195.16.0.0/19
195.130.128.0/19
195.162.192.0/19
212.76.224.0/19
212.88.224.0/19
212.123.0.0/19
213.118.0.0/15
213.132.128.0/19
213.214.32.0/19
213.224.0.0/16
213.251.64.0/18
217.72.224.0/20
217.168.120.0/21
IPv6:
2a00:1cf8::/32
2a02:1800::/24
Signature Algorithm: sha256WithRSAEncryption
59:c4:cc:cb:82:4d:3b:1e:64:6c:8e:ee:ff:97:67:36:ae:89:
c8:dc:8c:56:8c:62:6c:ac:14:4c:1f:02:71:6b:18:b8:05:31:
44:11:ba:38:04:c4:92:ab:53:2d:91:b0:10:e7:75:38:06:da:
df:4a:6f:fd:a5:da:46:4e:d2:83:56:4a:68:4b:f5:46:62:e1:
6a:50:4a:1c:89:47:81:20:7a:2f:72:6b:54:50:a8:a2:da:1d:
9a:c2:94:81:78:b1:b8:d3:d6:f2:d5:3a:f8:df:1f:9d:73:9f:
96:65:c9:f5:8e:0b:56:25:52:47:11:e8:3b:53:7b:0e:4e:6b:
9d:63:ed:ce:2a:e2:a4:b5:82:df:87:3e:6b:3c:5c:f9:08:83:
d3:a2:22:d9:bd:bc:07:b0:cb:67:ee:93:cd:0d:5e:04:ab:3c:
85:ea:6a:e8:0b:3e:b5:63:9c:bf:5e:c5:e3:76:14:b0:e8:9a:
0f:e1:e6:2b:9b:4c:9f:f8:5b:80:aa:a9:2b:dd:27:46:1d:d6:
12:22:6f:7e:bf:c2:95:0d:7c:a0:f2:fa:8f:a8:d4:a0:15:1a:
cb:fe:63:3b:69:f1:cb:38:01:9a:d4:c3:4c:f9:b2:28:cf:a4:
30:69:e7:d9:0d:4c:ee:e4:9a:7c:22:25:9e:97:03:a6:09:54:
7b:6d:db:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 15:30:06 2024 by rpki-client on console-ams.rpki-client.org